47bb7f855cdf116c62499240089fa1b7a69585e8b7f639e192b9d038da4094cd[.]zip

Resubmissions

27-01-2023 07:24

230127-h8ld7she43 10

25-04-2022 13:47

220425-q3kjqaccd4 8

23-04-2022 16:23

220423-tvtdfadcc3 10

22-04-2022 08:33

220422-kfyj6sgbam 10

Sharing

Copy URL

Twitter E-mail

General

Target

47bb7f855cdf116c62499240089fa1b7a69585e8b7f639e192b9d038da4094cd.zip
Size

3.2MB
MD5

c3c8d26fe476948be33d6aca0b231d18
SHA1

0ee923a9665c0f993a87b5075c0e55d7d1788896
SHA256

13e34ee48550c03e90008bace2279b3206333905c9b3de05756551c83674ce70
SHA512

79a354402b9581b285c39685ca510db89d38725bd8a45779a2d7a137e16fc618cd10fb43b012982d5716b14e838f6a9e3af6962f90509745de20686ba7fb5913
SSDEEP

49152:sT9EyDllo0K8fTbCcmbf6hGCLuNEbyMiQrgfFTUKLX2eugAyBTRhI4fS+FhQ0UL/:mSszHCDf6UCqebZ69cQrtNS+s0Mb8s

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 5 IoCs

Processes:

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS

Files

47bb7f855cdf116c62499240089fa1b7a69585e8b7f639e192b9d038da4094cd.zip
.zip

Password: infected
47bb7f855cdf116c62499240089fa1b7a69585e8b7f639e192b9d038da4094cd.apk
.apk android

com.nnawozvvi.pamwhbawm

com.nnawozvvi.pamwhbawm.WNiudwabNUDIba

Activities

com.nnawozvvi.pamwhbawm.WNiudwabNUDIba

android.intent.action.MAIN

com.nnawozvvi.pamwhbawm.opnoPAWNDioaNDW

android.intent.action.SEND
android.intent.action.SENDTO

Permissions

android.permission.FOREGROUND_SERVICE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_SMS
android.permission.USE_BIOMETRIC
android.permission.WRITE_SMS
android.permission.RECEIVE_MMS
android.permission.WAKE_LOCK
android.permission.USE_FULL_SCREEN_INTENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.REQUEST_DELETE_PACKAGES
android.permission.QUERY_ALL_PACKAGES
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.REQUEST_PASSWORD_COMPLEXITY

Receivers

com.nnawozvvi.pamwhbawm.receiver.AIUbawuidBAWUdi

android.provider.Telephony.SMS_RECEIVED
android.provider.Telephony.SMS_DELIVER

com.nnawozvvi.pamwhbawm.receiver.eifbiaFBAUIFB

android.intent.action.INPUT_METHOD_CHANGED
android.intent.action.BOOT_COMPLETED
android.intent.action.QUICKBOOT_POWERON
com.htc.intent.action.QUICKBOOT_POWERON
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED
android.intent.action.ACTION_PACKAGE_ADDED

com.nnawozvvi.pamwhbawm.AOInwiaofNAIWOfnai

android.provider.Telephony.WAP_PUSH_DELIVER

Services

com.nnawozvvi.pamwhbawm.iaoWNDoianwdoIAWND

android.intent.action.RESPOND_VIA_MESSAGE

com.nnawozvvi.pamwhbawm.UIDNwaidobaWIODb

android.accessibilityservice.AccessibilityService

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: infected

com.nnawozvvi.pamwhbawm

com.nnawozvvi.pamwhbawm.WNiudwabNUDIba

Activities

com.nnawozvvi.pamwhbawm.WNiudwabNUDIba

com.nnawozvvi.pamwhbawm.opnoPAWNDioaNDW

Permissions

Receivers

com.nnawozvvi.pamwhbawm.receiver.AIUbawuidBAWUdi

com.nnawozvvi.pamwhbawm.receiver.eifbiaFBAUIFB

com.nnawozvvi.pamwhbawm.AOInwiaofNAIWOfnai

Services

com.nnawozvvi.pamwhbawm.iaoWNDoianwdoIAWND

com.nnawozvvi.pamwhbawm.UIDNwaidobaWIODb